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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 



1 . (Currently Amended) A computer implemented method comprising: 

at a network access device communicably coupled to a host network, sensing a user device 
coupled to a port of the network access device; 

determining, by the network access device, if the user device supports a user authentication 
protocol used by the host network, the determining comprising polling the user device 
for the user authentication protocol, the user authentication protocol comprising a 
protocol to validate the identity of a user of the user device; and 

placing, by the network access device, the port into a semi-authorized access state if the 
determining indicates it is determined that the user device does not support the user 
authentication protocol, the semi-authorized access state providing the user device with 
limited network access. 

2. (Previously Presented) The method of claim 1, wherein the semi-authorized state limits 
access by the user device to a network, the network selected from the group comprising a 
Voice over Internet Protocol (VoIP) network, the Internet, and a low security virtual local 
area network (VLAN). 

3-4. (Cancelled) 

5. (Previously Presented) The method of claim 1, wherein the placing comprises selectively 
placing the port into one of a plurality of semi-authorized access states. 
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6. (Previously Presented) The method of claim 5, wherein the placing comprises: 
determining a type of the user device; and 

selectively placing the port into one of a plurality of semi-authorized access states based on 
the type of the user device. 

7. (Previously Presented) The method of claim 6, wherein the selectively placing comprises 
selectively placing the port into a semi-authorized access state that limits access by the user 
device to a network comprising a Voice over Internet Protocol (VoIP) network. 

8. (Previously Presented) The method of claim 6, wherein the selectively placing comprises 
selectively placing the port into a semi-authorized access state that limits access by the user 
device to a network comprising the Internet if the user device is a portable computing 
device. 

9. (Previously Presented) The method of claim 1 , wherein the user authentication protocol is 
IEEE 802. lx. 

10. (Previously Presented) The method of claim 1, wherein the network access device 
comprises a network switch. 

1 1 . (Currently Amended) A network access device comprising: 
a plurality of input ports; 

a plurality of output ports; 

a switching fabric for routing data received on the plurality of input ports to at least one of 
the plurality of output ports; and 
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control logic adapted to determine, by the network access device, whether a user device 
coupled to one of the plurality of input ports supports a user authentication protocol 
used by a host network, and to place, by the network access device, the one of the input 
ports in a semi-authorized access state if the determination indicates the authentication 
protocol is not supported, the semi-authorized access state providing the user device 
with limited network access, the determining comprising polling the user device for the 
user authentication protocol, the user authentication protocol comprising a protocol to 
validate the identity of a user of the user device. 

12. (Previously Presented) The device of claim 11, wherein the semi-authorized state limits 
access by the user device to a network, the network selected from the group comprising a 
Voice over Internet Protocol (VoIP) network, the Internet, and a low security virtual local 
area network (VLAN). 

13-14. (Cancelled). 

15. (Previously Presented) The device of claim 11, wherein the control logic is adapted to 
selectively place the one of the input ports into one of a plurality of semi-authorized access 
states. 

16. (Previously Presented) The device of claim 15, wherein the control logic is adapted to 
determine a type of the user device and to selectively place the one of the input ports into 
one of a plurality of semi-authorized access states based on the type of the user device. 
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17. (Previously Presented) The device of claim 16, wherein the control logic is adapted to 
selectively place the one of the input ports into a semi-authorized access state that limits 
access by the user device to a network comprising a Voice over Internet Protocol (VoIP) 
network. 

18. (Previously Presented) The device of claim 16, wherein the control logic is adapted to 
selectively place the one of the input ports into a semi-authorized access state that limits 
access by the user device to a network comprising the Internet if the user device is a portable 
computing device. 

19. (Previously Presented) The device of claim 11, wherein the user authentication protocol is 
IEEE 802. lx. 

20. (Currently Amended) A network system, comprising: 

a host network that uses a user authentication protocol; 

a network access device communicatively coupled to the host network; and 

a user device coupled to a port of the network access device; 

wherein the network access device is adapted to: 

determine whether the user device supports the user authentication protocol; and 
place the port in a semi-authorized access state if the determination indicates the 
user authentication protocol is not supported, the semi-authorized access state 
providing the user device with limited network access, the determining comprising 
polling the user device for the user authentication protocol, the user authentication 
protocol comprising a protocol to validate the identity of a user of the user device. 
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21 . (Previously Presented) The network system of claim 20, wherein the semi-authorized state 
limits access by the user device to a network, the network selected from the group 
comprising a Voice Over Internet Protocol (VoIP) network, the Internet, and a low-security 
virtual local area network (VLAN). 

22-23. (Cancelled) 

24. (Previously Presented) The network system of claim 20, wherein the network access device 
is adapted to selectively place the port into one of a plurality of semi-authorized access 
states. 

25. (Previously Presented) The network system of claim 24, where the network access device is 
adapted to determine a type of the user device and to selectively place the port into one of a 
plurality of semi-authorized access states based on the type of the user device. 

26. (Previously Presented) The network system of claim 25, wherein the network access 
device is adapted to selectively place the port into a semi-authorized access state that 
limits access by the user device to a network comprising a Voice over Internet Protocol 
(VoIP) network. 

27. (Previously Presented) The network system of claim 25, wherein the network access 
device is adapted to selectively place the port into a semi-authorized access state that 
limits access by the user device to a network comprising the Internet if the user device 
is a portable computing device. 
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28. (Previously Presented) The network system of claim 20, wherein the user authentication 
protocol is IEEE 802. lx. 

29. (Previously Presented) The network system of claim 20, wherein the network access 
device is a network switch. 

30. (Cancelled) 

3 1 . (Currently Amended) An apparatus comprising: 

means for sensing a user device coupled to a port of a network access device; 

means for determining, by the network access device, if the user device supports a user 
authentication protocol used by the host network, the determining comprising polling 
the user device for the user authentication protocol, the user authentication protocol 
comprising a protocol to validate the identity of a user of the user device; and 

means for placing, by the network access device, the port into a semi-authorized access state 
if the determining indicates it is dotorminod that the user device does not support the 
user authentication protocol, the semi-authorized access state providing the user device 
with limited network access. 

32. (Previously Presented) A computer implemented method comprising: 

at a network access device communicably coupled to a host network, sensing a user device 

coupled to a port of the network access device; and 
at the network access device, allowing the user device limited access to a network via the 

network access device if it is determined that the user device is unable to communicate 
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using a particular user authentication protocol, the user authentication protocol 
comprising a protocol to validate the identity of a user of the user device. 

33. (Previously Presented) The method of claim 32, further comprising performing further user 
authentication in accordance with the user authentication protocol if it is determined that the 
user device is able to communicate using the user authentication protocol. 

34. (Previously Presented) The method of claim 32 wherein the limited access comprises less 
access than access afforded a user device that is successfully authenticated using the user 
authentication protocol. 

35. (Previously Presented) The method of claim 34 wherein the limited access comprises access 
to a low-security Virtual Local Area Network (VLAN). 

36. (Previously Presented) A network access device comprising: 
a plurality of input ports; 

a plurality of output ports; 

a switching fabric for routing data received on the plurality of input ports to at least one of 

the plurality of output ports; and 
control logic at the network access device configured to allow the user device limited access 

to a network if it is determined that the user device is unable to communicate using a 

particular user authentication protocol, the user authentication protocol comprising a 

protocol to validate the identity of a user of the user device. 
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37. (Previously Presented) The network access device of claim 36 wherein the control logic is 
further configured to perform further user authentication in accordance with the user 
authentication protocol if it is determined that the user device is able to communicate using 
the user authentication protocol. 

38. (Previously Presented) The network access device of claim 36 wherein the limited access 
comprises less access than access afforded a user device that is successfully authenticated 
using the user authentication protocol. 

39. (Previously Presented) The network access device of claim 38 wherein the limited access 
comprises access to a low-security Virtual Local Area Network (VLAN). 

40. (Cancelled) 

41. (Previously Presented) An apparatus comprising: 

means at a network access device for sensing a user device coupled to a port of the a 
network access device; and 

means at the network access device for allowing the user device limited access to a network 
via the network access device if it is determined that the user device is unable to 
communicate using a particular user authentication protocol, the user authentication 
protocol comprising a protocol to validate the identity of a user of the user device. 
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